Skip to content

Kirby CMS's content locks disclose IDs and emails of inaccessible users from `users.access/list` permissions

Moderate severity GitHub Reviewed Published May 19, 2026 in getkirby/kirby • Updated May 27, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts